IIJ GIOコンテンツアクセラレーションサービス APIリファレンス

Signature生成サンプル (PowerShell)

Signature生成サンプル

このサンプルはAPI利用方法で示した署名(Signature)の生成方法を紹介するためのものです。

PowerShell v3 以降にて動作を確認しております。

サンプルプログラムでは署名を生成するのみで、APIのリクエストは行いません。

サンプルコード

$IIJAPI_EXPIRE=(Get-Date).ToUniversalTime().AddHours(1).ToString("yyyy-MM-ddThh:mm:ssZ")
$IIJAPI_SECRET_KEY="XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX"
$IIJAPI_ACCESS_KEY="XXXXXXXXXXXXXXXXXXXX"
 
$METHOD="GET"
$API="contract"
$APIVERSION="20140602"
$SERVICECODE="cac12345678"

if ($METHOD -eq "GET") {
  $TYPE = ""
} else {
  $TYPE = "application/json"
}

$string_to_sign = 
  $METHOD + "`n" +
  "" +  "`n" +
  $TYPE +  "`n" +
  ("x-iijapi-expire:" + $IIJAPI_EXPIRE) + "`n" +
  "x-iijapi-signaturemethod:HmacSHA256" + "`n" +
  "x-iijapi-signatureversion:2" + "`n" +
  ("/r/" + $APIVERSION + "/" + $SERVICECODE + "/" + $API + ".json")

$hmacsha = New-Object System.Security.Cryptography.HMACSHA256
$hmacsha.key = [Text.Encoding]::ASCII.GetBytes($IIJAPI_SECRET_KEY)
$signature = $hmacsha.ComputeHash([Text.Encoding]::ASCII.GetBytes($string_to_sign))
$signature = [Convert]::ToBase64String($signature)

echo $signature

Signature生成サンプル　実行例

SecretKey、API有効期限を環境変数で与えます。

AccessKeyはAPIリクエスト実行時に使用します。

※このスクリプトはあくまでサンプルです。環境変数、PowerShellのhistoryからAccessKey, SecretKeyが漏洩しないように十分に注意して下さい。
※PowerShell 上でスクリプトを実行させる場合、環境設定の変更が必要になる場合があります。 

PS C:\Users\user> .\sign.ps1 
blYqEogt4XNvvtTBvqNqPr96yRI/PxiJ4yZRRIOK76Q=
PS C:\Users\user>

APIリクエスト 実行例

生成したSignatureを使用してAPIを実行するサンプルです。
前項のサンプルコードと組み合わせて利用できます。

GET contract
$IIJAPI_REQUEST_HEADERS = @{
  "x-iijapi-Expire"=$IIJAPI_EXPIRE;
  "x-iijapi-SignatureMethod"="HmacSHA256";
  "x-iijapi-SignatureVersion"="2";
  "Authorization"="IIJAPI " + $IIJAPI_ACCESS_KEY + ":" + $signature
}

try {
  $response = Invoke-WebRequest -Method Get -Headers $IIJAPI_REQUEST_HEADERS https://cac.api.iij.jp/r/20140602/cac12345678/contract.json
  #Write-Output $response.StatusCode
  #Write-Output $response.Headers
  Write-Output $response.Content
} catch [System.Net.WebException] {
  Write-Output $_
}

実行結果

{"Result":{"RequestId":"xxxxxxxx-xxxxxxxx-xxxxxxxx-xxxxxxxx-xxxxxxxx","ServiceCode":"cac12345678","PublicFqdn":"www.cac-example.iijgio.jp","CNAME":"xxxxxxxxxx.cas.iijgio.jp","Https":"off","DdoS":"off","Constructions":"on","OriginAccessType":"host","Origin":["origin.cac-example.iijgio.jp"],"OriginSendPublicFqdn":"off","NextOriginAccessType":"host","NextOrigin":["origin.cac-example.iijgio.jp"],"NextOriginSendPublicFqdn":"off","CreatedAt":"2014/02/18"}}

 

PUT origin
$IIJAPI_REQUEST_HEADERS = @{
  "x-iijapi-Expire"=$IIJAPI_EXPIRE;
  "x-iijapi-SignatureMethod"="HmacSHA256";
  "x-iijapi-SignatureVersion"="2";
  "Authorization"="IIJAPI " + $IIJAPI_ACCESS_KEY + ":" + $signature
}

$body = @'
{"OriginAccessType":"ip","OriginIPList":["123.123.123.123"]}
'@

try {
  $response = Invoke-WebRequest -Method Put -Headers $IIJAPI_REQUEST_HEADERS -ContentType "application/json" -Body $body https://cac.api.iij.jp/r/20140602/cac12345678/origin.json
  #Write-Output $response.StatusCode
  #Write-Output $response.Headers
  Write-Output $response.Content
} catch [System.Net.WebException] {
  Write-Output $_
}

実行結果

{"Result":{"RequestId":"xxxxxxxx-xxxxxxxx-xxxxxxxx-xxxxxxxx-xxxxxxxx","ServiceCode":"cac12345678","OriginAccessType":"ip","Origin":["123.123.123.123"],"OriginSendPublicFqdn":
 "on","NextOriginAccessType":"ip","NextOrigin": 
["123.123.123.123"],"NextOriginSendPublicFqdn":"on"}}

 

POST accesslog_key
$IIJAPI_REQUEST_HEADERS = @{
  "x-iijapi-Expire"=$IIJAPI_EXPIRE;
  "x-iijapi-SignatureMethod"="HmacSHA256";
  "x-iijapi-SignatureVersion"="2";
  "Authorization"="IIJAPI " + $IIJAPI_ACCESS_KEY + ":" + $signature
}

$body = @'
{"BasicAuth":"on"}
'@

try {
  $response = Invoke-WebRequest -Method Post -Headers $IIJAPI_REQUEST_HEADERS -ContentType "application/json" -Body $body https://cac.api.iij.jp/r/20140602/cac12345678/accesslog_key.json
  #Write-Output $response.StatusCode
  #Write-Output $response.Headers
  Write-Output $response.Content
} catch [System.Net.WebException] {
  Write-Output $_
}

実行結果

{"Result":{"RequestId":"xxxxxxxx-xxxxxxxx-xxxxxxxx-xxxxxxxx-xxxxxxxx","ServiceCode":"cac12345678","DownloadUrl":"https://help.cas.iijgio.jp/downloads/cac12345678/access_logs","DownloadKey":"wv1msg9yexdivicsxnbx0phrnhg","Expire":"2014-06-10 13:41:01","MaxNum":"20","User":"cac12345678","Password":"-McMSAxEjYOnxA"}}

 

次のURLでアクセスログ(gzip形式)をダウンロードできます。

https://help.cas.iijgio.jp/downloads/cac12345678/access_logs?log_date=2014-06-09&download_key=wv1msg9yexdivicsxnbx0phrnhg&urlscheme=http